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Secure chip generates a first 
random number. 

1 

Create a migratable keyblob using 
first random number, the migratable 
keyblob containing a key. 

l 

Wrap the migratable keyblob with a 
public key of the key's parent key. 

I 

Receive a pass phrase for a user of 
the key. 

I 

Generate a second random number 
based on the pass phrase. 

I 

Generate a third random number 
based on the first random number. 

I 

Generate a fourth random number 
based on the first random number 
and the third random number. 



Store the fourth random number. 



Migrating the migratable keyblob 
from the computer with the secure 
chip to itself. 



r END ^ 
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Scramble a key. 

I 

TPM generates a first random number. 

i ■ z 

XOR scrambled key with first random 
number to create migratable keyblob. 

I 

Wrap the migratable keyblob using a 
public key of the key's parent key. 

Receive a pass phrase for a user of the 
key. 

I 

Generate a second random number by 
hashing the pass phrase. 

I 

Generate a third random number by 
applying a mass generation function to 
the second random number and 
convert it into a string with the same 
length as the first random number. 

I 

Generate a fourth random number by 
XOR'ing the first random number with 
the third random number. 

i 

Store the fourth random number. 

l 

Migrate the migratable keyblob from 
the computer with the TPM to itself. 



Q END J 
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Receive the pass phrase. 



Obtain the third random 
number from the pass 
phrase. 



Obtain the first random 
number by XOR'ing the 
third random number with 
the stored fourth random 
number. 



Send the first random 

number and the 
encrypted migratabie 
keyblob to the TPM. 



I 



TPM unwraps the 
migratabie keyblob with 
its private key. 



I 



TPM XOR migratabie 
keyblob with the first 
random number to obtain 
scrambled key. 



TPM unscrambles the 
key. 
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